Behavioral task
behavioral1
Sample
fce1ac268664f99c6905995c9331e8e1_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
fce1ac268664f99c6905995c9331e8e1_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
fce1ac268664f99c6905995c9331e8e1_JaffaCakes118
-
Size
16KB
-
MD5
fce1ac268664f99c6905995c9331e8e1
-
SHA1
32715d655b4dccf5f6fa3e8cf1a36109dcb565d4
-
SHA256
1380abf2c79dcc4cccdad408fa1b444c3f85c5117cbd86f28b566d38d0572f44
-
SHA512
7c65131cb9f64087087b3cfb89c8d6c08681ac34da8396447d9d30ef8979db4e1471a5d47fa09a38e2423ca567cdaa740673540ede66ebb1ef809b8442024a04
-
SSDEEP
384:2AyWN4r5XAsX7WPCkM2edjh6d9JiLv70cyuXKthAQNk4J:fN4tCPCT28YtiLvgcyoKXN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fce1ac268664f99c6905995c9331e8e1_JaffaCakes118
Files
-
fce1ac268664f99c6905995c9331e8e1_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPXA Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPXB Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE